Skip to content

Service: organizations

Attached Policies

Policy ARN Policy Name
arn:aws:iam::aws:policy/PowerUserAccess PowerUserAccess
arn:aws:iam::aws:policy/ReadOnlyAccess ReadOnlyAccess
arn:aws:iam::aws:policy/IAMFullAccess IAMFullAccess
arn:aws:iam::aws:policy/SecurityAudit SecurityAudit
arn:aws:iam::aws:policy/AWSDirectoryServiceFullAccess AWSDirectoryServiceFullAccess
arn:aws:iam::aws:policy/AWSDirectoryServiceReadOnlyAccess AWSDirectoryServiceReadOnlyAccess
arn:aws:iam::aws:policy/job-function/ViewOnlyAccess ViewOnlyAccess
arn:aws:iam::aws:policy/AWSHealthFullAccess AWSHealthFullAccess
arn:aws:iam::aws:policy/aws-service-role/AmazonSSMServiceRolePolicy AmazonSSMServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonGuardDutyServiceRolePolicy AmazonGuardDutyServiceRolePolicy
arn:aws:iam::aws:policy/AmazonGuardDutyReadOnlyAccess AmazonGuardDutyReadOnlyAccess
arn:aws:iam::aws:policy/AmazonGuardDutyFullAccess AmazonGuardDutyFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSSSOServiceRolePolicy AWSSSOServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSConfigRoleForOrganizations AWSConfigRoleForOrganizations
arn:aws:iam::aws:policy/aws-service-role/FMSServiceRolePolicy FMSServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSArtifactAccountSync AWSArtifactAccountSync
arn:aws:iam::aws:policy/AWSFMAdminFullAccess AWSFMAdminFullAccess
arn:aws:iam::aws:policy/AWSFMAdminReadOnlyAccess AWSFMAdminReadOnlyAccess
arn:aws:iam::aws:policy/AWSFMMemberReadOnlyAccess AWSFMMemberReadOnlyAccess
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonMacieServiceRolePolicy AmazonMacieServiceRolePolicy
arn:aws:iam::aws:policy/AWSSSOReadOnly AWSSSOReadOnly
arn:aws:iam::aws:policy/AWSSSOMasterAccountAdministrator AWSSSOMasterAccountAdministrator
arn:aws:iam::aws:policy/AWSSSOMemberAccountAdministrator AWSSSOMemberAccountAdministrator
arn:aws:iam::aws:policy/aws-service-role/CloudTrailServiceRolePolicy CloudTrailServiceRolePolicy
arn:aws:iam::aws:policy/AWSOrganizationsFullAccess AWSOrganizationsFullAccess
arn:aws:iam::aws:policy/AWSOrganizationsReadOnlyAccess AWSOrganizationsReadOnlyAccess
arn:aws:iam::aws:policy/aws-service-role/AWSResourceAccessManagerServiceRolePolicy AWSResourceAccessManagerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSLicenseManagerServiceRolePolicy AWSLicenseManagerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSLicenseManagerMasterAccountRolePolicy AWSLicenseManagerMasterAccountRolePolicy
arn:aws:iam::aws:policy/AWSPrivateMarketplaceAdminFullAccess AWSPrivateMarketplaceAdminFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSSecurityHubServiceRolePolicy AWSSecurityHubServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSControlTowerServiceRolePolicy AWSControlTowerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSConfigMultiAccountSetupPolicy AWSConfigMultiAccountSetupPolicy
arn:aws:iam::aws:policy/IAMAccessAdvisorReadOnly IAMAccessAdvisorReadOnly
arn:aws:iam::aws:policy/ServiceQuotasReadOnlyAccess ServiceQuotasReadOnlyAccess
arn:aws:iam::aws:policy/ServiceQuotasFullAccess ServiceQuotasFullAccess
arn:aws:iam::aws:policy/AWSMarketplaceProcurementSystemAdminFullAccess AWSMarketplaceProcurementSystemAdminFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSSystemsManagerAccountDiscoveryServicePolicy AWSSystemsManagerAccountDiscoveryServicePolicy
arn:aws:iam::aws:policy/aws-service-role/WAFV2LoggingServiceRolePolicy WAFV2LoggingServiceRolePolicy
arn:aws:iam::aws:policy/AWSBackupFullAccess AWSBackupFullAccess
arn:aws:iam::aws:policy/AWSBackupOperatorAccess AWSBackupOperatorAccess
arn:aws:iam::aws:policy/aws-service-role/AWSTrustedAdvisorReportingServiceRolePolicy AWSTrustedAdvisorReportingServiceRolePolicy
arn:aws:iam::aws:policy/IAMAccessAnalyzerFullAccess IAMAccessAnalyzerFullAccess
arn:aws:iam::aws:policy/aws-service-role/AccessAnalyzerServiceRolePolicy AccessAnalyzerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/ComputeOptimizerServiceRolePolicy ComputeOptimizerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSNetworkManagerServiceRolePolicy AWSNetworkManagerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/CloudFormationStackSetsOrgAdminServiceRolePolicy CloudFormationStackSetsOrgAdminServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/Health_OrganizationsServiceRolePolicy Health_OrganizationsServiceRolePolicy
arn:aws:iam::aws:policy/ComputeOptimizerReadOnlyAccess ComputeOptimizerReadOnlyAccess
arn:aws:iam::aws:policy/AmazonDetectiveFullAccess AmazonDetectiveFullAccess
arn:aws:iam::aws:policy/AWSBackupOrganizationAdminAccess AWSBackupOrganizationAdminAccess
arn:aws:iam::aws:policy/AWSLakeFormationCrossAccountManager AWSLakeFormationCrossAccountManager
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantine AWSCompromisedKeyQuarantine
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole AWS_ConfigRole
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy AWSSupportServiceRolePolicy
arn:aws:iam::aws:policy/AWSBudgetsActionsWithAWSResourceControlAccess AWSBudgetsActionsWithAWSResourceControlAccess
arn:aws:iam::aws:policy/aws-service-role/S3StorageLensServiceRolePolicy S3StorageLensServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonDevOpsGuruServiceRolePolicy AmazonDevOpsGuruServiceRolePolicy
arn:aws:iam::aws:policy/AmazonMonitronFullAccess AmazonMonitronFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSMarketplaceLicenseManagementServiceRolePolicy AWSMarketplaceLicenseManagementServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSAuditManagerServiceRolePolicy AWSAuditManagerServiceRolePolicy
arn:aws:iam::aws:policy/AWSAuditManagerAdministratorAccess AWSAuditManagerAdministratorAccess
arn:aws:iam::aws:policy/AWSSecurityHubOrganizationsAccess AWSSecurityHubOrganizationsAccess
arn:aws:iam::aws:policy/aws-service-role/AWSApplicationMigrationServiceRolePolicy AWSApplicationMigrationServiceRolePolicy
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantineV2 AWSCompromisedKeyQuarantineV2
arn:aws:iam::aws:policy/service-role/AWSCostAndUsageReportAutomationPolicy AWSCostAndUsageReportAutomationPolicy
arn:aws:iam::aws:policy/AmazonDevOpsGuruOrganizationsAccess AmazonDevOpsGuruOrganizationsAccess
arn:aws:iam::aws:policy/aws-service-role/AmazonInspector2ServiceRolePolicy AmazonInspector2ServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonDetectiveServiceLinkedRolePolicy AmazonDetectiveServiceLinkedRolePolicy
arn:aws:iam::aws:policy/AWSMigrationHubRefactorSpacesFullAccess AWSMigrationHubRefactorSpacesFullAccess
arn:aws:iam::aws:policy/AmazonInspector2FullAccess AmazonInspector2FullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSIPAMServiceRolePolicy AWSIPAMServiceRolePolicy
arn:aws:iam::aws:policy/AmazonInspector2ReadOnlyAccess AmazonInspector2ReadOnlyAccess
arn:aws:iam::aws:policy/AWSBillingConductorFullAccess AWSBillingConductorFullAccess
arn:aws:iam::aws:policy/AWSBillingConductorReadOnlyAccess AWSBillingConductorReadOnlyAccess
arn:aws:iam::aws:policy/aws-service-role/AWSWellArchitectedOrganizationsServiceRolePolicy AWSWellArchitectedOrganizationsServiceRolePolicy
arn:aws:iam::aws:policy/AWSTrustedAdvisorPriorityFullAccess AWSTrustedAdvisorPriorityFullAccess
arn:aws:iam::aws:policy/AWSTrustedAdvisorPriorityReadOnlyAccess AWSTrustedAdvisorPriorityReadOnlyAccess
arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicy AWSResourceExplorerServiceRolePolicy
arn:aws:iam::aws:policy/AWSResourceExplorerReadOnlyAccess AWSResourceExplorerReadOnlyAccess
arn:aws:iam::aws:policy/AWSResourceExplorerFullAccess AWSResourceExplorerFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSReachabilityAnalyzerServiceRolePolicy AWSReachabilityAnalyzerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/SecurityLakeServiceLinkedRole SecurityLakeServiceLinkedRole
arn:aws:iam::aws:policy/aws-service-role/AWSLicenseManagerLinuxSubscriptionsServiceRolePolicy AWSLicenseManagerLinuxSubscriptionsServiceRolePolicy
arn:aws:iam::aws:policy/AmazonDetectiveInvestigatorAccess AmazonDetectiveInvestigatorAccess
arn:aws:iam::aws:policy/AmazonDetectiveOrganizationsAccess AmazonDetectiveOrganizationsAccess
arn:aws:iam::aws:policy/AWSMigrationHubRefactorSpaces-EnvironmentsWithoutBridgesFullAccess AWSMigrationHubRefactorSpaces-EnvironmentsWithoutBridgesFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSServiceCatalogOrgsDataSyncServiceRolePolicy AWSServiceCatalogOrgsDataSyncServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSUserNotificationsServiceLinkedRolePolicy AWSUserNotificationsServiceLinkedRolePolicy
arn:aws:iam::aws:policy/AmazonSecurityLakeAdministrator AmazonSecurityLakeAdministrator
arn:aws:iam::aws:policy/aws-service-role/AWSArtifactServiceRolePolicy AWSArtifactServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AmazonDataZoneGlueManageAccessRolePolicy AmazonDataZoneGlueManageAccessRolePolicy
arn:aws:iam::aws:policy/AWSResourceExplorerOrganizationsAccess AWSResourceExplorerOrganizationsAccess
arn:aws:iam::aws:policy/aws-service-role/CostOptimizationHubServiceRolePolicy CostOptimizationHubServiceRolePolicy
arn:aws:iam::aws:policy/CostOptimizationHubAdminAccess CostOptimizationHubAdminAccess
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForPrivateMarketplaceAdminPolicy AWSServiceRoleForPrivateMarketplaceAdminPolicy
arn:aws:iam::aws:policy/aws-service-role/SplitCostAllocationDataServiceRolePolicy SplitCostAllocationDataServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForUserSubscriptions AWSServiceRoleForUserSubscriptions
arn:aws:iam::aws:policy/aws-service-role/SSMQuickSetupRolePolicy SSMQuickSetupRolePolicy
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantineV3 AWSCompromisedKeyQuarantineV3
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForProcurementInsightsPolicy AWSServiceRoleForProcurementInsightsPolicy
arn:aws:iam::aws:policy/aws-service-role/AWSDataExchangeServiceRolePolicyForOrganizationDiscovery AWSDataExchangeServiceRolePolicyForOrganizationDiscovery
arn:aws:iam::aws:policy/aws-service-role/AWSDataExchangeServiceRolePolicyForLicenseManagement AWSDataExchangeServiceRolePolicyForLicenseManagement
arn:aws:iam::aws:policy/ResourceGroupsTaggingAPITagUntagSupportedResources ResourceGroupsTaggingAPITagUntagSupportedResources
arn:aws:iam::aws:policy/AWS-SSM-DiagnosisAutomation-OperationalAccountAdministrationRolePolicy AWS-SSM-DiagnosisAutomation-OperationalAccountAdministrationRolePolicy
arn:aws:iam::aws:policy/AWS-SSM-RemediationAutomation-OperationalAccountAdministrationRolePolicy AWS-SSM-RemediationAutomation-OperationalAccountAdministrationRolePolicy
arn:aws:iam::aws:policy/AWSArtifactAgreementsFullAccess AWSArtifactAgreementsFullAccess
arn:aws:iam::aws:policy/AWSArtifactAgreementsReadOnlyAccess AWSArtifactAgreementsReadOnlyAccess
arn:aws:iam::aws:policy/aws-service-role/AWSObservabilityAdminServiceRolePolicy AWSObservabilityAdminServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSSecurityIncidentResponseServiceRolePolicy AWSSecurityIncidentResponseServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/CloudWatchNetworkFlowMonitorServiceRolePolicy CloudWatchNetworkFlowMonitorServiceRolePolicy
arn:aws:iam::aws:policy/AWSSecurityIncidentResponseFullAccess AWSSecurityIncidentResponseFullAccess
arn:aws:iam::aws:policy/AIOpsAssistantPolicy AIOpsAssistantPolicy
arn:aws:iam::aws:policy/AIOpsConsoleAdminPolicy AIOpsConsoleAdminPolicy
arn:aws:iam::aws:policy/aws-service-role/AWSManagedServices_SelfServiceReporting_ServiceRolePolicy AWSManagedServices_SelfServiceReporting_ServiceRolePolicy

Allowed Actions

Action Service
organizations:* organizations
organizations:AttachPolicy organizations
organizations:CreateAccount organizations
organizations:CreateOrganization organizations
organizations:CreatePolicy organizations
organizations:DeletePolicy organizations
organizations:DeregisterDelegatedAdministrator organizations
organizations:Describe* organizations
organizations:DescribeAccount organizations
organizations:DescribeCreateAccountStatus organizations
organizations:DescribeEffectivePolicy organizations
organizations:DescribeOrganization organizations
organizations:DescribeOrganizationalUnit organizations
organizations:DescribePolicy organizations
organizations:DescribeResourcePolicy organizations
organizations:DetachPolicy organizations
organizations:DisableAWSServiceAccess organizations
organizations:DisablePolicyType organizations
organizations:EnableAWSServiceAccess organizations
organizations:EnablePolicyType organizations
organizations:InviteAccountToOrganization organizations
organizations:List* organizations
organizations:ListAWSServiceAccessForOrganization organizations
organizations:ListAccounts organizations
organizations:ListAccountsForParent organizations
organizations:ListChildren organizations
organizations:ListDelegatedAdministrators organizations
organizations:ListDelegatedServicesForAccount organizations
organizations:ListOrganizationalUnitsForParent organizations
organizations:ListParents organizations
organizations:ListPolicies organizations
organizations:ListPoliciesForTarget organizations
organizations:ListRoots organizations
organizations:ListTagsForResource organizations
organizations:ListTargetsForPolicy organizations
organizations:MoveAccount organizations
organizations:RegisterDelegatedAdministrator organizations
organizations:TagResource organizations
organizations:UntagResource organizations
organizations:UpdatePolicy organizations
organizations:listAccounts organizations
organizations:listTagsForResource organizations